Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: 4EyX9EkdhhZOL3CWgks6m25a7Ytr9MyMrWcs7WTLk3M=
Subject key identifier: 31:E0:CE:AE:7A:49:40:F4:47:8E:27:DF:D7:05:97:AB:B8:13:10:82
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 019EE857AECB4309BF4DE01B74F53503E9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 1971
Signing time: Sun 21 Jun 2026 04:02:00 +0000
Manifest this update: Sun 21 Jun 2026 04:02:00 +0000
Manifest next update: Mon 22 Jun 2026 04:02:00 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: yQTAljltRRPrPsQLS8S0B0hDA474vUJj/L7Q+RGdECw=)
2: F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa (hash: 4XFHQlUZw+5vTRxUTYeT4+YjnJnMJyoXfBSAScrWHnE=)
3: vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa (hash: VDAC21VKqXFo8f4kpCzGmv5zrcQUyhDkUhgQDzFTnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:57:ae:cb:43:09:bf:4d:e0:1b:74:f5:35:03:e9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Jun 21 04:02:00 2026 GMT
Not After : Jun 22 04:02:00 2026 GMT
Subject: CN=31e0ceae7a4940f4478e27dfd70597abb8131082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:9e:77:2e:e0:1b:e5:ed:65:88:4c:1e:62:
f3:3d:0a:6f:83:33:5d:c4:2e:03:ea:68:36:33:cf:
2c:74:b3:d7:3a:50:3e:88:cd:ca:df:2e:bd:ca:ee:
25:a2:80:58:7b:a6:29:a1:ef:ca:d9:bc:36:4e:cd:
10:db:4d:27:f9:a7:bd:76:a6:9c:35:e6:30:79:cf:
98:34:ba:78:a4:5c:b6:15:c0:c9:08:58:23:3d:b6:
a0:a6:6c:c7:61:b9:37:ee:46:8d:28:d7:d9:23:5f:
b6:78:c4:9c:46:67:38:95:51:e0:74:2a:b1:65:d7:
9c:8e:80:da:cf:c7:6c:88:0d:75:50:37:d4:67:a4:
91:37:5c:9d:9f:49:12:74:c6:f5:12:ca:81:79:a1:
53:f5:4d:86:e9:e2:28:1e:dc:2f:22:c3:12:26:21:
da:d1:d9:95:1e:90:dc:1c:45:52:7c:af:f3:ca:c6:
54:66:8b:cb:3f:e5:84:a6:ff:ba:c1:7a:4a:79:46:
bf:68:7f:8e:39:94:07:ab:0e:37:f0:16:a6:bd:8d:
75:50:7a:6e:af:5a:dd:78:51:2b:08:81:9f:4a:5c:
47:22:ea:cd:d3:5c:52:8a:39:e0:73:3f:0d:53:7c:
f9:bc:73:b8:2e:50:0d:34:d3:8c:18:a2:4d:9b:48:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E0:CE:AE:7A:49:40:F4:47:8E:27:DF:D7:05:97:AB:B8:13:10:82
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d2:2c:fa:1a:b6:fb:06:ea:04:c4:23:7e:23:a7:11:c2:f4:
27:58:0d:3f:d1:41:88:4e:ed:a4:75:72:24:44:38:64:d7:d3:
fb:a3:98:f1:ea:4f:36:a5:68:31:ff:64:44:29:78:f9:3c:03:
24:5a:22:d9:f4:2f:41:b1:74:50:c8:2a:7a:3b:a0:31:1d:9e:
0b:c9:f6:79:ec:87:29:4c:c0:05:88:74:57:3f:b8:7f:14:36:
8d:f3:ca:71:c8:36:ff:f5:26:47:8e:23:61:36:2d:0a:54:d6:
d2:d7:4c:fd:81:4e:23:62:9a:5f:24:a6:4e:42:4c:a0:bb:31:
88:fb:6d:28:ce:c5:c6:6d:6d:47:60:8a:a8:cd:ed:fd:dd:aa:
6c:ed:d4:83:84:a0:6b:40:7d:97:84:83:49:97:2e:10:d0:30:
52:03:a3:bc:8f:cc:22:1f:be:58:bb:d9:a1:b1:64:13:b1:af:
92:d2:fb:3e:1c:21:77:d2:47:60:96:82:01:8e:aa:ef:e5:ef:
ca:88:38:62:5b:2c:47:26:f2:4b:86:28:32:95:e8:3e:8a:52:
70:dd:34:59:f7:a2:46:f1:1a:a7:4c:29:dd:c2:c5:7b:81:6d:
bd:50:8c:de:39:60:e4:fb:d5:f9:0e:bb:38:31:4a:f4:1f:b3:
b0:b6:9b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:26:33 2026 by rpki-client